Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/AE1747DE13FC11EEAD14AF35C4F9AE02.roa
File:                     AE1747DE13FC11EEAD14AF35C4F9AE02.roa (raw, json)
Hash identifier:          uBYO+C6UlAsgzho2C/yzZOLuZD7LLvHBHa19TIwL+RU=
Subject key identifier:   AE:FD:A1:19:D0:10:2C:3B:B4:B2:0C:20:79:22:EC:45:75:30:18:8D
Certificate issuer:       /CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
Certificate serial:       0184
Authority key identifier: 6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/AE1747DE13FC11EEAD14AF35C4F9AE02.roa
Signing time:             Sat 05 Jul 2025 04:09:49 +0000
ROA not before:           Sat 05 Jul 2025 04:09:49 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     151346
IP address blocks:        103.208.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl
                          rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 03:48:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC86F, serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
        Validity
            Not Before: Jul  5 04:09:49 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6868a58c-5671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:60:7a:22:50:be:a5:de:3c:8f:c6:f7:d9:a7:
                    34:12:17:8d:5d:64:d4:95:12:46:c4:08:c9:c8:8f:
                    da:ff:1d:09:13:96:4d:bf:31:67:d8:cd:66:e6:01:
                    3c:08:77:3f:c9:cf:9c:37:d3:8e:8f:bd:6e:3a:b2:
                    29:00:82:69:bf:db:cd:44:8c:09:60:a5:f2:f4:80:
                    af:0e:04:24:1c:ac:b2:e4:96:df:5b:56:96:4a:07:
                    49:5f:8a:93:8b:5c:32:74:3c:a8:1b:87:bc:95:f8:
                    f6:fb:97:75:d7:6e:0e:24:45:79:5b:c2:59:b0:e8:
                    f5:58:5a:93:18:c8:ab:c1:08:5b:a9:38:5f:f0:6a:
                    87:dd:d7:b1:df:dd:f7:0b:9d:db:83:b6:45:fd:45:
                    65:e6:0e:81:c2:c1:9c:7c:18:bf:da:b3:93:68:2f:
                    f0:f9:d8:ba:1d:c0:78:c6:80:06:5b:34:f1:e4:d4:
                    c0:b0:4b:0e:52:8c:97:be:ca:9e:b0:03:3c:d6:9e:
                    3f:55:7a:8f:15:2b:5e:90:9b:1d:72:80:bb:56:9f:
                    a0:f0:0a:f2:c9:83:72:25:7a:19:17:4d:d7:68:12:
                    19:eb:e3:02:20:50:6c:02:08:56:ea:89:53:83:ea:
                    a2:14:bf:64:9f:e8:ef:52:ee:85:32:9c:ca:a9:ee:
                    46:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FD:A1:19:D0:10:2C:3B:B4:B2:0C:20:79:22:EC:45:75:30:18:8D
            X509v3 Authority Key Identifier:
                keyid:6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/AE1747DE13FC11EEAD14AF35C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:cd:a4:b0:f4:95:bf:76:f6:ae:33:e4:f5:eb:2c:4b:2c:7d:
         b8:9b:01:9e:3d:95:7c:e6:b0:68:32:76:36:70:b3:ca:00:57:
         14:07:89:73:5c:fb:5f:7d:56:12:03:80:f2:b2:f0:35:b4:eb:
         55:e9:0b:e4:2b:52:12:a5:c1:6f:44:da:4d:8f:38:51:c5:af:
         1d:bf:96:f4:3c:28:70:5b:e5:42:c6:2f:48:16:07:0d:b5:02:
         c7:1c:10:25:61:97:0d:73:d4:31:1c:97:5c:8e:c6:4f:1a:e7:
         ae:eb:f4:2e:b7:d1:0a:78:21:f8:b1:4e:d1:a2:8c:8d:9f:38:
         4d:94:29:4e:d4:1d:28:cb:5a:2c:83:8f:1f:1f:ca:23:84:80:
         85:92:46:96:86:a5:fd:99:75:99:4b:fd:2f:40:81:0f:53:e4:
         0b:0a:2c:11:d2:3e:d0:bf:c4:80:d6:ec:fc:4a:c1:c0:49:51:
         05:84:17:72:3b:54:89:17:10:d5:9a:fc:21:ea:2d:7f:31:19:
         c8:a6:30:53:3b:f5:4e:98:08:9f:22:b7:1a:01:39:7c:c0:69:
         34:66:d6:59:ed:a4:6a:13:38:d4:1d:3b:c7:1a:59:67:f5:d3:
         5a:fe:e3:c0:a4:f4:50:ae:47:96:71:f3:8a:f1:b1:be:78:0c:
         e3:c4:5a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:41:45 2025 by rpki-client